xinyin025/TravianZ
1
0
Fork 0
mirror of https://github.com/Shadowss/TravianZ.git synced 2026-07-17 10:06:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: a LOT of manual typecastings for DB values that should be INTs

Browse Source
This commit is contained in:
Martin Ambrus
2017-10-18 00:33:03 +02:00
parent 96cd79adc9
commit 057f713528
7 changed files with 495 additions and 493 deletions
Download Patch File Download Diff File Expand all files Collapse all files
GameEngine/Account.php
+1 -1
View File
@@ -164,7 +164,7 @@ class Account {
private function Unreg() {
global $database;
$q = "SELECT * FROM ".TB_PREFIX."activate where id = '".$database->escape($_POST['id'])."'";
$q = "SELECT * FROM ".TB_PREFIX."activate where id = '".$database->escape((int) $_POST['id'])."'";
$result = mysqli_query($GLOBALS['link'],$q);
$dbarray = mysqli_fetch_array($result);
if(md5($_POST['pw']) == $dbarray['password']) {